UbuntuUpdates.org

Package "libvpx"

Name: libvpx

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • VP8 and VP9 video codec encoding/decoding tools

Latest version: 1.15.0-2ubuntu0.1
Release: plucky (25.04)
Level: security
Repository: universe

Links



Other versions of "libvpx" in Plucky

Repository Area Version
base main 1.15.0-2
base universe 1.15.0-2
updates main 1.15.0-2ubuntu0.1
updates universe 1.15.0-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.15.0-2ubuntu0.1 2025-06-03 17:07:38 UTC

  libvpx (1.15.0-2ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: use-after-free vulnerability
    - debian/patches/CVE-2025-5283.patch: fix double free on init failure.
    - CVE-2025-5283

 -- Fabian Toepfer <email address hidden> Mon, 02 Jun 2025 18:58:08 +0200

CVE-2025-5283 Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML



About   -   Send Feedback to @ubuntu_updates